$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: Ke9gKsgX6tBD11OqLJnEzTuR+6Qa0wZjOMy9Zus7IiY= Subject key identifier: 44:E3:A8:41:CF:30:F5:E2:F6:1F:31:98:15:44:99:3F:7E:04:1E:C1 Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 767EC8797D850993789607F364B05E43B7E59E94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: 0132 Signing time: Tue 24 Mar 2026 03:21:36 +0000 Manifest this update: Tue 24 Mar 2026 03:16:36 +0000 Manifest next update: Fri 27 Mar 2026 12:04:36 +0000 Files and hashes: 1: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: OPt+rRhjeG41N/mJaT0mB4Dryaw/j8pB0Q5pO3mWwpU=) 2: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: QycY/dSx+Oz4LAgKxxV2bWxr/1UgNtRPaxYmwj7EakM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7e:c8:79:7d:85:09:93:78:96:07:f3:64:b0:5e:43:b7:e5:9e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Mar 24 03:16:36 2026 GMT Not After : Mar 27 12:04:36 2026 GMT Subject: CN=44E3A841CF30F5E2F61F31981544993F7E041EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d5:6b:7e:b1:b6:c4:99:57:9a:d9:0d:dd:3c: 30:92:9e:7f:7a:6f:7c:82:28:da:a9:1e:b1:1e:b9: ef:6e:8e:e6:a7:b1:fe:b6:eb:c6:5b:f8:1a:62:ae: 2e:b0:49:0a:69:29:83:e2:90:ae:7a:69:c1:59:13: e7:6a:58:59:34:fc:9e:2d:d8:dc:04:70:1f:e4:23: 05:70:e5:4d:c4:e6:d0:84:c0:91:1d:14:1f:4c:9b: 11:09:c6:fe:66:45:c1:b4:45:c3:50:ea:43:68:17: a2:8c:ee:22:47:d8:76:a5:93:57:af:de:6e:1c:65: 58:aa:5e:19:3e:dc:dd:d8:51:76:e2:63:01:2c:b4: 17:65:54:c0:30:4c:b1:7c:06:57:4f:c0:2a:25:69: a2:01:ec:a0:84:32:20:6e:59:cf:2b:b8:28:c3:06: fb:50:83:fc:56:f7:11:78:6b:f2:f5:15:3a:b1:47: 2c:3b:9c:9d:65:22:6b:e4:60:72:4f:81:f5:b9:00: 8d:32:5a:d6:92:cc:c7:ce:e6:e9:ae:8a:8d:27:20: b9:d9:d1:1c:91:26:50:ea:65:ba:51:a6:e8:5e:98: c7:18:f6:a4:c2:a3:3b:ab:e4:f5:5a:8a:3e:15:59: 3d:44:aa:04:e6:e5:b5:06:f8:e0:05:50:6c:80:5d: d8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E3:A8:41:CF:30:F5:E2:F6:1F:31:98:15:44:99:3F:7E:04:1E:C1 X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:15:af:64:b9:13:93:0e:df:16:91:26:c3:ff:f2:74:14:b0: 26:23:1a:55:23:0e:e8:83:17:dd:b3:9d:06:d3:99:bf:20:e0: d3:be:e8:1c:b2:80:96:31:1d:98:7a:6c:54:be:61:16:08:b6: 21:ef:96:12:ca:0b:a8:08:99:ff:f8:3c:b4:c6:a0:92:ce:52: e1:c4:cf:2e:e2:70:f4:83:c7:54:c0:31:47:b6:b0:68:9a:f1: b9:c0:85:65:b7:dc:ec:85:69:cd:d0:36:78:dd:f5:d8:30:27: 03:8a:e6:8b:b2:44:69:cd:b8:06:10:a2:f0:af:c3:4c:1a:4b: 30:ec:7f:b6:6d:31:7e:ec:ec:98:77:2b:c6:98:17:b6:45:93: dd:63:1b:2e:2e:65:fa:ad:ad:53:a9:8b:31:e4:88:4c:0f:d9: 05:56:28:55:70:f8:20:52:b9:f8:30:26:2c:c6:0a:14:78:28: 42:53:8f:f6:ed:41:df:41:bc:2b:66:66:4a:b7:b6:77:c2:e3: 58:27:98:04:4a:80:1e:4a:a4:63:9c:6b:49:37:bb:03:47:15: 4e:5d:f9:e7:a4:c2:41:96:ce:de:07:9a:e6:9d:c1:bf:ef:e9: 34:e2:57:a7:70:75:ce:49:0b:50:77:82:6d:6a:53:1a:89:f4: f4:7e:cd:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdn7IeX2FCZN4lgfzZLBeQ7flnpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNjAzMjQwMzE2MzZaFw0yNjAzMjcxMjA0MzZaMDMxMTAvBgNV BAMTKDQ0RTNBODQxQ0YzMEY1RTJGNjFGMzE5ODE1NDQ5OTNGN0UwNDFFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1Wt+sbbEmVea2Q3dPDCSnn96 b3yCKNqpHrEeue9ujuansf6268Zb+Bpiri6wSQppKYPikK56acFZE+dqWFk0/J4t 2NwEcB/kIwVw5U3E5tCEwJEdFB9MmxEJxv5mRcG0RcNQ6kNoF6KM7iJH2Halk1ev 3m4cZViqXhk+3N3YUXbiYwEstBdlVMAwTLF8BldPwColaaIB7KCEMiBuWc8ruCjD BvtQg/xW9xF4a/L1FTqxRyw7nJ1lImvkYHJPgfW5AI0yWtaSzMfO5umuio0nILnZ 0RyRJlDqZbpRpuhemMcY9qTCozur5PVaij4VWT1EqgTm5bUG+OAFUGyAXdg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUROOoQc8w9eL2HzGYFUSZP34EHsEwHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsVr2S5E5MO3xaRJsP/8nQUsCYjGlUjDuiD F92znQbTmb8g4NO+6ByygJYxHZh6bFS+YRYItiHvlhLKC6gImf/4PLTGoJLOUuHE zy7icPSDx1TAMUe2sGia8bnAhWW33OyFac3QNnjd9dgwJwOK5ouyRGnNuAYQovCv w0waSzDsf7ZtMX7s7Jh3K8aYF7ZFk91jGy4uZfqtrVOpizHkiEwP2QVWKFVw+CBS ufgwJizGChR4KEJTj/btQd9BvCtmZkq3tnfC41gnmARKgB5KpGOca0k3uwNHFU5d +eekwkGWzt4Hmuadwb/v6TTiV6dwdc5JC1B3gm1qUxqJ9PR+zeM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:18 2026 by rpki-client